$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: m+s2dXfOyVcxvsWgcdtjpIwam2FzgLm/ijg9ULA+XvQ= Subject key identifier: 30:72:F8:F1:C9:36:9F:57:82:27:00:DE:44:CD:B0:C3:A0:4E:9A:38 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:31:37 +0000 Manifest this update: Mon 03 Nov 2025 07:31:37 +0000 Manifest next update: Mon 10 Nov 2025 07:31:37 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: j247W6aJzEcux597fHRWVkLAr1X7tlO5I1jBq4Is/0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Nov 3 07:31:37 2025 GMT Not After : Nov 10 07:31:37 2025 GMT Subject: CN=69085a59-bba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:47:40:a8:87:67:c8:db:ee:84:4f:77:17: 7c:e6:05:ea:57:52:24:80:d9:f0:e0:06:e7:32:eb: 94:4a:3e:2e:56:e6:56:c8:84:de:53:94:6f:7d:4c: 65:a3:6d:19:7a:92:de:e1:87:b5:24:79:60:a9:30: 80:3f:4c:d3:a1:1d:45:c1:3c:47:ac:10:89:98:6c: f4:cf:3b:d0:60:75:a1:3f:2b:dd:61:47:7e:87:c1: 16:42:ab:6b:c0:f2:46:42:3d:5d:d3:21:f9:f0:54: c6:a8:35:9e:66:6c:65:c2:e9:d7:1d:19:c1:93:22: c1:6a:f3:ff:61:95:f8:f2:e1:d1:bf:1b:36:f8:85: 7d:07:91:ee:a2:26:2d:46:17:3f:a0:ca:76:3b:4c: 58:78:a1:2f:cb:9b:12:18:c1:5e:5d:eb:68:fd:b0: 88:6f:19:ba:f4:55:9c:e5:53:c3:17:e6:52:4b:b9: 51:55:60:e2:4f:9f:bb:11:41:ea:e8:d0:90:4f:b0: 0b:43:41:7b:c0:23:4f:4f:cd:17:54:1b:b1:2c:cb: 4f:85:81:4a:c4:aa:04:cf:1c:25:c1:7f:16:bd:8a: 73:94:7f:e4:0d:58:80:8c:ae:02:8f:f2:07:71:03: ab:3d:c9:73:8b:89:1f:66:b2:bf:26:c0:5f:c9:ad: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:F8:F1:C9:36:9F:57:82:27:00:DE:44:CD:B0:C3:A0:4E:9A:38 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:88:ce:38:25:d4:95:b8:c9:9b:ee:4b:f6:09:4a:c0:18: 99:f0:16:f6:21:6b:f7:d8:1a:02:ff:74:0c:bf:e7:84:52:e0: 00:6e:cf:d8:c1:ab:70:88:9d:86:33:6a:78:c8:b1:4d:25:c4: 50:2b:6e:ab:3c:42:ec:a9:04:ee:6e:47:73:a5:fa:4f:e5:2e: c0:60:fd:1a:32:f2:32:7a:5d:51:86:69:78:44:41:f2:13:e3: 0d:98:28:89:fc:44:37:34:8d:9c:58:5f:d9:6f:93:be:29:38: 16:1d:34:ca:38:37:75:cc:ab:45:78:28:62:8f:96:04:74:c4: 8c:bb:bf:f7:26:1a:58:ec:69:64:45:9c:2b:92:61:4f:aa:16: 1c:46:9d:6a:01:c8:f2:08:c1:9d:6f:cb:e1:58:f8:16:a3:2f: 7b:df:09:b5:45:b0:de:99:2e:10:00:e9:00:15:09:61:4a:f1: 1c:37:66:82:22:73:a1:ce:e9:f4:23:60:bc:c5:5b:f0:c6:e1: c2:85:d0:02:da:ce:7c:8f:10:bf:84:72:c9:a6:00:88:c7:a7: 1d:22:09:75:cf:d6:ea:3f:4a:0b:19:f0:58:05:57:68:01:91: 7a:bd:21:6b:3b:01:3b:c0:47:b7:a0:b0:44:c5:18:76:22:55: bd:15:42:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTExMDMwNzMxMzdaFw0yNTExMTAwNzMxMzdaMBgxFjAUBgNV BAMTDTY5MDg1YTU5LWJiYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfx0dAqIdnyNvuhE93F3zmBepXUiSA2fDgBucy65RKPi5W5lbIhN5TlG99TGWj bRl6kt7hh7UkeWCpMIA/TNOhHUXBPEesEImYbPTPO9BgdaE/K91hR36HwRZCq2vA 8kZCPV3TIfnwVMaoNZ5mbGXC6dcdGcGTIsFq8/9hlfjy4dG/Gzb4hX0Hke6iJi1G Fz+gynY7TFh4oS/LmxIYwV5d62j9sIhvGbr0VZzlU8MX5lJLuVFVYOJPn7sRQero 0JBPsAtDQXvAI09PzRdUG7Esy0+FgUrEqgTPHCXBfxa9inOUf+QNWICMrgKP8gdx A6s9yXOLiR9msr8mwF/JrfA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMHL48ck2 n1eCJwDeRM2ww6BOmjgwHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALoiM44JdSVuMmb7kv2CUrAGJnwFvYha/fYGgL/dAy/54RS4ABuz9jB q3CInYYzanjIsU0lxFArbqs8QuypBO5uR3Ol+k/lLsBg/Roy8jJ6XVGGaXhEQfIT 4w2YKIn8RDc0jZxYX9lvk74pOBYdNMo4N3XMq0V4KGKPlgR0xIy7v/cmGljsaWRF nCuSYU+qFhxGnWoByPIIwZ1vy+FY+BajL3vfCbVFsN6ZLhAA6QAVCWFK8Rw3ZoIi c6HO6fQjYLzFW/DG4cKF0ALaznyPEL+EcsmmAIjHpx0iCXXP1uo/SgsZ8FgFV2gB kXq9IWs7ATvAR7egsETFGHYiVb0VQqY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:39 2025 by rpki-client